Am 27.04.2014 00:12, schrieb Michael Kress: > > After boot up (i.e. starting up S24openvpn and S28shorewall) it doesn't > work right away. > The first pings get dropped, but with no logging. (DROP counter on tun1 > goes up though). > > Then comes the fun part: > I restart shorewall again and then I get a martian: > Apr 27 00:53:55 halgw kernel: martian source 192.168.0.11 from > 192.168.0.1, on dev eth1 > Apr 27 00:53:55 halgw kernel: ll header: > ff:ff:ff:ff:ff:ff:00:xx:xx:xx:xx:xx:08:06 > > And from that moment on it works! >
tested that a bit more ... WITHOUT shorewall: ================== The openvpn connection itself is fine - it would stay up and reconnect as needed. WITH shorewall: =============== Once the connection is up, it's fine with the above effect (martian). After a while, the connection drops and cannot reconnect. From that moment, the two counters "TX dropped" and "Tx bytes" go up. I can work around that by : shorewall clear ip route flush cache sleep 2 shorewall start During the sleep phase, openvpn makes a reconnect and in most cases it works again. How can I debug and stabilze that? Regards Michael ------------------------------------------------------------------------------ Start Your Social Network Today - Download eXo Platform Build your Enterprise Intranet with eXo Platform Software Java Based Open Source Intranet - Social, Extensible, Cloud Ready Get Started Now And Turn Your Intranet Into A Collaboration Platform http://p.sf.net/sfu/ExoPlatform _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
